Static task
static1
Behavioral task
behavioral1
Sample
3a8f1697bb1f364f63df317770bbb6de_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3a8f1697bb1f364f63df317770bbb6de_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3a8f1697bb1f364f63df317770bbb6de_JaffaCakes118
-
Size
229KB
-
MD5
3a8f1697bb1f364f63df317770bbb6de
-
SHA1
188189c2d315bf90cb5d97a4077dca93822f6db3
-
SHA256
1de5e457b9579c8fc4afd5d80e8e3a50d9b34a063b89972627f379ce44ee05b4
-
SHA512
bf513d9665fd4bdd08b2d6875f37dfd79d4ab2b3763eeddd101073d068e9f3ef78bc70174a32f13e1142de040e6562e6e18d505481e6296a97bc606b5914ef5a
-
SSDEEP
6144:7t7IAEgEKsLbdGdNA6FGyA06ARRNX66IArG2AUD:7mpKWcda6FgAP+WG2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8f1697bb1f364f63df317770bbb6de_JaffaCakes118
Files
-
3a8f1697bb1f364f63df317770bbb6de_JaffaCakes118.exe windows:4 windows x86 arch:x86
037d9364795de226aeb4d5d7dbece89a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
WaitNamedPipeA
CopyFileExA
GetThreadContext
FindResourceA
lstrcpyn
DosDateTimeToFileTime
SetPriorityClass
GlobalCompact
VirtualProtect
LocalFree
GetStartupInfoA
WriteProfileSectionW
GetProfileSectionW
ReadProcessMemory
OpenMutexA
SetConsoleCP
GlobalUnWire
SetTimeZoneInformation
HeapCompact
CreateFileMappingA
ReadDirectoryChangesW
WriteConsoleOutputW
EnumCalendarInfoA
UpdateResourceA
WriteProcessMemory
CreateRemoteThread
GetDiskFreeSpaceA
MultiByteToWideChar
GetProcessAffinityMask
GetTimeZoneInformation
SetThreadPriorityBoost
GetLargestConsoleWindowSize
SystemTimeToTzSpecificLocalTime
EnumResourceLanguagesA
TransmitCommChar
DisconnectNamedPipe
VirtualFree
CreateNamedPipeW
FreeEnvironmentStringsW
GetACP
GetProcessShutdownParameters
lstrcpy
GetNamedPipeHandleStateA
GetEnvironmentVariableW
SetLocalTime
GetNamedPipeInfo
GetFileInformationByHandle
RemoveDirectoryA
GetAtomNameW
GlobalFindAtomW
CreateNamedPipeA
ConnectNamedPipe
SetFileAttributesA
EnumSystemLocalesA
GetFileSize
SetConsoleCursorPosition
GetConsoleCP
CreateThread
SetThreadIdealProcessor
Module32First
GetLastError
FindNextFileA
GetPrivateProfileSectionNamesA
GlobalDeleteAtom
GetCommandLineW
EraseTape
GlobalFlags
GetAtomNameA
TerminateThread
CreateEventW
LeaveCriticalSection
lstrcatW
OpenFileMappingW
GlobalMemoryStatus
GlobalAlloc
LoadLibraryExA
GetFullPathNameA
LocalCompact
WritePrivateProfileStringA
GetFileAttributesExW
SignalObjectAndWait
GetPrivateProfileStringW
WaitForSingleObject
LockFile
ReadConsoleOutputAttribute
GetSystemTimeAdjustment
EnumSystemLocalesW
CreateProcessA
FindFirstChangeNotificationW
lstrcatA
FileTimeToSystemTime
GetThreadSelectorEntry
DuplicateHandle
SetConsoleMode
GetNumberOfConsoleMouseButtons
FillConsoleOutputCharacterA
FindFirstFileW
PeekNamedPipe
LoadModule
InterlockedIncrement
GetVersionExW
CreateFileW
GetThreadLocale
GetLongPathNameA
FindResourceExA
SetConsoleScreenBufferSize
GetNumberFormatA
ExpandEnvironmentStringsW
RtlZeroMemory
WaitForSingleObjectEx
GetTimeFormatA
RtlMoveMemory
LocalFileTimeToFileTime
ReadConsoleOutputA
InterlockedCompareExchange
FillConsoleOutputAttribute
GetCommandLineA
GetDiskFreeSpaceExA
GetVersionExA
CreateFileMappingW
DebugBreak
InitAtomTable
GetSystemDefaultLangID
GetDateFormatA
HeapDestroy
lstrlen
WritePrivateProfileStructW
EnumResourceTypesW
GetTempFileNameW
GetConsoleTitleA
GetNumberOfConsoleInputEvents
FindNextChangeNotification
OutputDebugStringA
GetEnvironmentStringsW
SetSystemTime
TlsGetValue
lstrcmpiW
TlsFree
GetHandleInformation
ResetWriteWatch
ReadConsoleInputA
HeapCreate
GetCalendarInfoA
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
GetTempPathW
GetDateFormatW
CreateTapePartition
SetSystemTimeAdjustment
CreateMutexW
Heap32ListFirst
VirtualUnlock
GetSystemDefaultLCID
Heap32Next
GlobalAddAtomA
CreateToolhelp32Snapshot
OpenSemaphoreA
GetPrivateProfileSectionW
TlsAlloc
DefineDosDeviceA
Thread32Next
OpenSemaphoreW
TryEnterCriticalSection
GetFileAttributesW
GetFileType
SetFilePointer
CopyFileA
GetPrivateProfileStructA
ConvertDefaultLocale
GetNamedPipeHandleStateW
EnumResourceLanguagesW
GetSystemDirectoryW
GetConsoleScreenBufferInfo
DisableThreadLibraryCalls
GetLogicalDriveStringsA
CreateWaitableTimerA
OpenProcess
SetHandleCount
GetQueuedCompletionStatus
WaitForMultipleObjectsEx
Process32Next
lstrcmpi
SetConsoleTitleW
CreateProcessW
SetConsoleCursorInfo
FindResourceExW
SetVolumeLabelW
UnhandledExceptionFilter
WritePrivateProfileStructA
SuspendThread
SetEndOfFile
OutputDebugStringW
GetPrivateProfileStructW
SearchPathW
FileTimeToLocalFileTime
lstrcpyA
GetFileAttributesExA
SetConsoleTitleA
GlobalWire
FindAtomA
HeapSize
CreateDirectoryW
ExitThread
CreateMutexA
GlobalGetAtomNameW
FlushViewOfFile
GetComputerNameW
GetStringTypeW
EnumCalendarInfoExW
GetPrivateProfileSectionNamesW
UnlockFile
CompareFileTime
FindCloseChangeNotification
GetConsoleMode
SetComputerNameA
MoveFileW
InterlockedDecrement
FindResourceW
FlushConsoleInputBuffer
SetCurrentDirectoryA
CreateSemaphoreA
DeleteFiber
SetCriticalSectionSpinCount
BeginUpdateResourceA
LocalFlags
IsValidLocale
OpenWaitableTimerA
lstrcmpA
GetProfileIntW
FindNextFileW
GetStringTypeExA
EnumDateFormatsExW
SetThreadPriority
lstrcmpiA
FileTimeToDosDateTime
ResetEvent
GetEnvironmentStringsA
VirtualFreeEx
LocalAlloc
ReadConsoleOutputCharacterA
SetCurrentDirectoryW
GetUserDefaultLangID
lstrlenW
LocalHandle
CreateFileA
user32
SetWindowsHookExA
UpdateWindow
DdeDisconnect
EnumThreadWindows
SetWindowLongW
EnumWindowStationsA
wvsprintfW
UnregisterHotKey
GetKeyboardLayoutNameA
BeginPaint
SetCursorPos
ShowOwnedPopups
SetClipboardData
GetWindowInfo
GetScrollInfo
GetWindowTextA
GetSystemMenu
SendIMEMessageExW
LookupIconIdFromDirectory
DdeCreateStringHandleW
GetMessageTime
CreateDialogParamW
SetWinEventHook
GetGUIThreadInfo
SwitchToThisWindow
WINNLSEnableIME
MessageBoxIndirectA
DrawFocusRect
GetWindowModuleFileNameW
ModifyMenuW
SetMessageQueue
CreateWindowExW
RegisterClipboardFormatA
KillTimer
DragDetect
IsDlgButtonChecked
GetUserObjectInformationW
LoadMenuW
DrawFrame
ActivateKeyboardLayout
SetCaretBlinkTime
DdeCreateDataHandle
GetListBoxInfo
VkKeyScanExA
GetClassNameW
MonitorFromWindow
DrawFrameControl
ToUnicode
SwitchDesktop
OemKeyScan
ReplyMessage
GetSysColorBrush
ReuseDDElParam
SendDlgItemMessageA
FindWindowExW
DestroyWindow
GetClassWord
SetThreadDesktop
CreateWindowStationA
GetDlgItemTextW
LoadKeyboardLayoutW
ShowCursor
SetPropA
DdeDisconnectList
DdeAbandonTransaction
CharLowerW
GetShellWindow
SetWindowTextW
UnloadKeyboardLayout
OpenIcon
CreateDialogParamA
GetMessageA
BroadcastSystemMessageW
FindWindowW
ChangeClipboardChain
GetSubMenu
SetDlgItemTextW
LoadStringA
RegisterClassW
CharPrevExA
GetClassLongW
DlgDirListComboBoxW
ShowCaret
EqualRect
UnregisterClassW
GetKeyboardLayout
OpenDesktopW
CountClipboardFormats
CheckDlgButton
SetWindowRgn
SystemParametersInfoA
ModifyMenuA
InsertMenuItemW
RealGetWindowClass
DestroyCaret
IsCharAlphaW
SetWindowPlacement
UnhookWindowsHookEx
DlgDirListA
RegisterHotKey
LoadImageA
LoadMenuIndirectA
GetWindowRgn
GetIconInfo
UnregisterClassA
EnumWindows
IsWindow
GetProcessWindowStation
BroadcastSystemMessage
GetScrollBarInfo
TrackPopupMenuEx
LoadMenuA
EnumDisplayDevicesW
DialogBoxIndirectParamW
LoadCursorFromFileW
SetWindowPos
DlgDirSelectComboBoxExW
GetGuiResources
GetUpdateRgn
GetMenuContextHelpId
gdi32
AngleArc
SetBkMode
GetCharWidthW
GetObjectType
DeleteColorSpace
RealizePalette
ColorCorrectPalette
SetPolyFillMode
PlayMetaFile
LineDDA
EndPath
ExtTextOutW
SetSystemPaletteUse
ResetDCA
GetDeviceCaps
DeleteMetaFile
ExtFloodFill
SetPaletteEntries
SelectClipPath
OffsetWindowOrgEx
CreateFontIndirectW
CreateRectRgn
CreateRoundRectRgn
GetMetaFileA
CreateMetaFileW
GetRgnBox
WidenPath
GetCurrentObject
CreateSolidBrush
PolyDraw
Polyline
TextOutA
RestoreDC
GetCharWidth32A
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ